Thread

I have a very BIG problem with EE2. I have an administrator account for a member of my site, who was on a PC, forgot to logout and closed his browser. Now, you would think he could just open up the browser and go back in to the EE CP, or at least log back in, but NO. EE2 says he is still logged in, or rather someone is logged in to the account. Now, why would I (an Admin) not have the ability to log his account out, SERIOUSLY. This is frustrating, and I need a fix…. PLEASE HELP!

You can do a few things:

1. Go to ‘Admin > Security & Privacy > Security & Session Preferences’ and set ‘Allow multiple log-ins from a single account?’ to Yes

2. Add the following to your config file (if it doesn’t already exist)

$config['allow_multi_logins'] = 'y';

Essentially the same as option 1, but doing it in the config file instead of the admin panel.

3. In MySQL clear any entries in the exp_sessions table (not recommended unless you know what you’re doing)

Gamer000,

Lee’s second method will get you back in if you are locked out.
No need to change the pref in the control panel then as the config.php overrides it.

Let us know if that helps?

Not sure if it was just good timing, but to fix the issue I banned the account then set it back to super-admin. For security I didn’t want to enable ‘allow_multi_logins’ for the site. However, ‘allow_multi_logins’ would be a nice feature for my administrative accounts. This could be a feature request, but I think it would be nice if under the list of members on the site it could display who is online or offline, then provide an option to admins to kick a user off their account if needed.

Gamer000,

We are always looking for solid Feature Requests! As far as you issue is concerned, is there anything else we can do to help, or are you good to go?

Cheers,

Actually No. I encountered an issue today when logging out of my user. I logged out of my admin account and then proceeded to try and login in a different browser on the same machine, but EE said someone was already logged into this account. Now, how can someone who logged out of there account get an issue where EE still thinks they are logged in. I need this fixed! And no, I need a fix that doesn’t involve me allowing multiple logins.

PLEASE HELP!!!!!!

Gamer000,

We are going to do everything we can to get this sorted out. Can you tell us what version of ExpressionEngine you are using? Under Admin-> Security and Privacy-> Security and Session Preferences, what do you have set for “Control Panel Session Type” and “User Session Type”?

Cheers,

I am running the latest EE version 2.2.2, my “Control Panel Session Type” is set to: Cookies and session ID, and my “User Session Type” is set to: Cookies only.

Thanks.

Gamer000,

I’m not sure what’s causing this for you; I’ve tested this locally, and if I set Allow multiple log-ins from a single account? to “No”, it works as expected. Only after logging out of one browser am I able to log in to another.

I’m going to look deeper into this one, so while I’m doing that, could you post back here with the browsers you’re using to test this? What kind of server environment do you have this site running in?

Also, could you list the add-ons you’ve got installed in EE?

Globally disable extensions and give it a try again. Does the same behavior still present itself?

Alright, well it seems to be working right now… I did change User Session Type to: “Cookies and session ID”, as “Allow multiple log-ins” is set to no, but even after changing the session type back I can’t seem to recreate the issue.

If I run into the problem again I will re-post the topic. Thanks for the help, I just wish I was positive everything has been resolved…

Well, something is still wrong. I just noticed when using the login form in my EE Forum, after being redirected to the member side of my site, that when I try to visit the forum I am still logged out.

I think the firsttimer extension may be causing a problem, but I’m not certain yet.

To recap “this” problem:
I log in with the form shown in the default EE Discussion Forum module.
Then, I get redirected to a members only web page on my site.
If I then try to leave that page I find I am no longer logged in.
However, if I log in with my site log in form everything on the front-end works fine.

What the heck could cause this? I will look into disabling my extensions and try this again, if it resolves the issue I will let you know.

I Globally disabled extensions as recommended and logged into my site with my forum log in form. The same problem occurred. As soon as I leave the forum to visit member only pages on my site I get logged out, without notice or warning.

Gamer000,

Have you tried setting an explicit cookie domain? Admin-> Security and Privacy-> Cookie Settings-> “Cookie Domain”. And may I ask where you are redirecting after a forum login?

Cheers,

As an example, what would I put for the “explicit cookie domain”? My main site domain is “www.skyeyeweather.com”, but I am using the multi-site manager and am experiencing all the problems on my sub-domain “w3.skyeyeweather.com”.

I’ve attached screen-captures of my settings for security and cookies on my W3 subdomain.

You should also know I didn’t start experiencing these issues until I upgraded from 1.7.1 to EE 2.2.2, and started using the multi-site manager and EE forum, but that could be because I didn’t look hard enough…

Also, I don’t think it’s normal, but when I log in on one site in EE and then switch to the other with multi-site, the front-end of the other site acts as if I am logged out. Could this be caused by my cookie settings?